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1 Technical correspondence: Analysis and detection of computer viruses and worms: Q 
an annotated bibliography 
Prabhat K. Singh, Arun Lakhotia 

February 2002 ACM SIGPLAN Notices, Volume 37 issue 2 
Publisher: ACM Press 

Full text available: ^ pdf(667.42 KB) Additional Information: full citation , abstract 

This annotated bibliography reviews research in analyzing and detecting computer viruses 
and worms. This document focuses on papers that give information about techniques and 
systems detecting malicious code. 

2 A software authentication system for the prevention of computer viruses Q 
Lein Harn, Hung-Yu Lin, Shoubao Yang 

April 1992 Proceedings of the 1992 ACM annual conference on Communications CSC 
'92 

Publisher: ACM Press 

Full text available: ||| pdf(387.97 KB ) Additional Information: full citation , abstract , referenc es, index term s 

In the absence of systematic techniques to detect the existence of computer viruses, 
preventing suspicious software from entering the system at the initial point of entry 
appears to be the best method to protect computing resources against attacks of 
computer viruses. Currently, software is distributed primarily by diskettes instead of 
online transmission. Diskettes are more susceptible to modification and masquerading 
while on-line transmission usually follows proper user/message authentic ... 

Session 3: discussion: Ontolo g y in information security: a useful theoretical Q 
foundation and methodological tool 

Victor Raskin, Christian F. Hempelmann, Katrina E. Triezenberg, Sergei Nirenburg 
September 2001 Proceedings of the 2001 workshop on New security paradigms NSPW 
■01 

Publisher: ACM Press 

Additional Information: full citation , abstract , references , citin gs, index 
terms 



Full text available: |g| pdf(507.99 KB) 



The paper introduces and advocates an ontological semantic approach to information 
security. Both the approach and its resources, the ontology and lexicons, are borrowed 



http://portal.acm.o^ 5/11/2007 



Results (page 1): (virus signature) and (group or set or category or hierarch*) and (progra... Page 2 of 4 



from the field of natural language processing and adjusted to the needs of the new 
domain. The approach pursues the ultimate dual goals of inclusion of natural language 
data sources as an integral part of the overall data sources in information security 
applications, and formal specification of the information security community ... 

Keywords: documentation, human factors, languages, security, standardization, theory 



Computer virus-antivirus coevolution 
Carey Nachenberg 

January 1997 Communications of the ACM, volume 40 issue l 
Publisher: ACM Press 

Full text available: ^ pdf(317.53 KB) Additional Information: full citation , citings , index terms , review 



Compute r s ecurity: Neutralizin g windows-based malicious mobile code 
James A. Whittaker, Andres De Vivanco 

March 2002 Proceedings of the 2002 ACM symposium on Applied computing SAC '02 
Publisher: ACM Press 

Full text available* pdf(840 36 KB) Additional Information: full citation , abstract , references , citings , index 

: terms 

Mobile code— executable programs that get copied from computer-to-computer via e- 
mail, web browsers, etc.— is a popular way to stage malicious attacks against users. The 
Windows operating system is often the target of such attacks, in part because of its 
ubiquity and in part because of the vast functionality it provides. Some of this 
functionality, like executable e-mail attachments and scripting, provides opportunity for 
mobile code to cause significant damage to a host system. One obv ... 

Keywords: API hooking, code signing, interrupt table, mobile code, native code, 
sandbox, virus, windows, worm, wrapper 



6 There is no such thin g as free sup port 
Dianne Brotherson 

October 2000 Proceedings of the 28th annual ACM SIGUCCS conference on User 
services: Building the future SIGUCCS 'OO 

Publisher: ACM Press 

Full text available: |g |pdf(1 38.50 KB) Additional Information: full citation , index terms 



Keywords: charge-back, computer support, help center, support costs 



7 



String barcoding: uncovering optimal virus signatures 
Sam Rash, Dan Gusfield 

April 2002 Proceedings of the sixth annual international conference on 
Computational biology RECOMB '02 

Publisher: ACM Press 

Full text available* 15Lpdf(3 98 MB) Additional Information: full citation , abstract , references , citings, index 

terms 

There are many critical situations when one needs to rapidly identify an unidentified 
pathogen from among a given set of previously sequenced pathogens. DNA or RNA 
hybridization chips can be designed for such identifications. Each cell in the chip can 
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report the presence or absence of a specific substring of DNA in the unidentified 
pathogen. Properly designed, the collection of reports obtained from the cells can uniquely 
identify any pathogen in the set, or determine that the unidentified patho ... 

Keywords: barcoding, string barcoding, suffix trees, testing set, virus signatures 



8 Peer to peer networks: A reputation-based approach for choosing reliable resources Q 
^ in peer-to-peer networks 

^ Ernesto Damiani, De Capitani di Vimercati, Stefano Paraboschi, Pierangela Samarati, Fabio 
Violante 

November 2002 Proceedings of the 9th ACM conference on Computer and 

communications security CCS '02 
Publisher: ACM Press 

Full text available: ffi pdf(650,i9 KB) Additional Information: full citation , abstract , references , citings, index 
. [A] m terms 

Peer-to-peer (P2P) applications have seen an enormous success, and recently introduced 
P2P services have reached tens of millions of users. A feature that significantly contributes 
to the success of many P2P applications is user anonymity. However, anonymity opens 
the door to possible misuses and abuses, exploiting the P2P network as a way to spread 
tampered with resources, including Trojan Horses, viruses, and spam. To address this 
problem we propose a self-regulating system where the P2P netwo ... 

Keywords: peer-to-peer network, polling protocol, reputation-based systems 



9 WebALPS: a survey of E-commerce privacy and security applications 
S. W. Smith 

June 2001 ACM SIGecom Exchanges, volume 2 issue 3 
Publisher: ACM Press 

Full text available* 151 pdf(13526_KB) Addit ' onal Information: full citation , abstract , references , citings , index 
' ^ terms 

Web-based commerce is rife with scenarios where a party needs to trust properties of 
computation and data storage occurring at a remote machine, operated by a different 
party with different interests.- In our WebALPS project, we have used off-the-shelf 
hardware and open source software to build trusted co-servers co-resident with Web 
servers, and bring the secure SSL channel all the way into these trusted co-servers. In 
this paper, we survey how this tool can be used to systematically addr ... 

10 Securing information transmission by redundancy 
Jun Li, Peter Reiher, Gerald Popek 

September 1999 Proceedings of the 1999 workshop on New security paradigms NSPW 
'99 

Publisher: ACM Press 

Full text available: ^ pdf(582.78 KB) Additional Information: full citation , references , index terms 



11 Building an e-mail virus detection system for your network I I 

Dave Jones 

December 2001 Linux Journal, volume 2001 issue 92 
Publisher: Specialized Systems Consultants, Inc. 

Full text available: g| html(22.15 KB) Additional Information: full citation , abstract , index terms 
Jones gives a great example of a homegrown virus protection system. 
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12 Computer immunolog y I I 

Stephanie Forrest, Steven A. Hofmeyr, Anil Somayaji 
October 1997 Communications of the ACM, volume 40 issue 10 
Publisher: ACM Press 

Full text available: 1|| pdf(460.66 KB) Additional Information: full cita tion, references , citings, index terms 



13 Helping Macintosh refugees into a Windows world I I 

Tommy Roberson, Rob Branham 

November 1999 Proceedings of the 27th annual ACM SIGUCCS conference on User 

services: Mile high expectations SIGUCCS '99 
Publisher: ACM Press 

Full text available: 1|i| pdf(65.35 KB ) Additional Information: full citation , references , index terms 
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